Certificate Transparency Monitoring

Provides a critical security tool for MSPs to detect and alert on unauthorized certificate issuance for client domains.

Cloudflare Certificate Transparency Monitoring sends email alerts when certificates for your domains appear in public Certificate Transparency (CT) logs, so you can spot a certificate you did not expect. All publicly trusted certificates are logged to CT logs, because browsers such as Google Chrome and Apple's Safari will not trust a certificate that is not logged.

The feature is now generally available. Earlier versions also alerted on the many certificates Cloudflare issues on your behalf, such as Universal SSL renewals, certificates from Advanced Certificate Manager and backup certificates, and a single Universal SSL certificate can renew as often as every 60 days. Cloudflare now filters out certificates it issued for you before an alert is sent, so the alerts that remain cover certificates Cloudflare did not issue. It suits MSPs managing client domains on Cloudflare who want warning of unexpected or rogue certificates.